$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/906e2291-613d-339e-8038-3e70422ca33a.roa File: 906e2291-613d-339e-8038-3e70422ca33a.roa (raw, json) Hash identifier: T1k3HplIWchJxkUBZPnGp3vKnJHwu7lNmyp/5GnPD1A= Subject key identifier: BB:77:D5:3F:5D:DF:95:B0:38:A4:36:7A:E7:B5:A5:46:8A:A0:71:70 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D81004FC60421C080FC5A0600 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/906e2291-613d-339e-8038-3e70422ca33a.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 16839 IP address blocks: 149.96.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:00:4f:c6:04:21:c0:80:fc:5a:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=92d54870-02b4-43f1-a06a-0c7dfdd40192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e7:8d:45:94:ac:54:43:05:9a:a7:9f:9c:f8: a8:ae:7e:a2:cb:ff:99:09:0f:05:f4:63:69:9e:5f: b0:65:f7:24:44:a2:62:42:0d:65:38:f2:2a:dc:04: 18:c2:3a:13:49:3f:12:91:74:b4:70:7c:6a:75:12: da:b0:0b:62:dc:99:52:f2:48:d8:7a:aa:da:a4:0d: 00:2a:71:91:0b:d0:f9:27:b1:89:c2:34:0a:79:4b: fc:28:1a:f1:44:e8:c1:9b:c1:1b:a6:74:17:d8:cf: de:da:0a:2c:b7:7a:bb:7c:2c:fb:58:c8:ac:1f:35: 3f:6a:99:71:fd:66:b4:e6:b6:d0:76:11:9f:59:1d: 89:06:49:02:b7:0d:e2:51:83:db:76:1e:9d:23:a2: 8a:12:cd:20:d2:16:b9:65:c4:71:82:39:ab:8e:b5: 9e:97:89:35:b2:9d:6e:d3:a0:61:08:63:31:7c:16: f8:42:6b:5b:69:fc:68:3f:8b:d9:27:3c:42:27:f2: 42:1b:75:36:9d:fa:01:e7:22:ad:77:bc:34:fb:69: 5a:1a:77:43:ac:f1:75:3d:96:a9:6a:b3:26:0f:49: 89:a0:4b:b5:2b:c5:c9:27:9f:91:d7:b8:96:6d:2f: 22:80:01:b3:94:48:4c:f6:b9:3b:54:e1:78:55:66: 9f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:77:D5:3F:5D:DF:95:B0:38:A4:36:7A:E7:B5:A5:46:8A:A0:71:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/906e2291-613d-339e-8038-3e70422ca33a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:90:4d:63:af:c9:fd:53:b1:84:87:d7:b7:7b:ed:65:60:da: 20:b7:df:55:a9:29:a3:e6:de:ad:95:5e:0a:5a:3e:6a:64:0c: b4:66:9c:c4:b6:46:88:ac:e8:86:5a:80:14:b1:aa:5d:a6:cc: 76:08:07:0d:83:3c:47:bf:6b:71:63:6f:90:2c:4b:6a:8b:bb: 67:45:d6:e1:a2:0c:a6:0c:5d:d8:bc:ae:f8:5a:b4:b8:41:c7: b7:8f:a7:bb:6e:60:97:af:e9:4f:2e:75:33:cb:d7:5b:fc:9f: ae:12:d1:39:4c:de:2e:d5:a0:a3:43:44:43:81:02:1b:c4:6f: e9:c8:61:d9:3f:d3:e7:e0:d0:4b:81:0b:04:0a:4d:0f:9c:12: bb:4f:0d:35:59:51:36:d0:63:d6:a5:58:b0:8a:c3:c2:26:6a: 08:9a:46:0a:e6:cf:1b:82:98:af:53:6a:66:61:5a:1a:a9:3e: 15:98:21:39:e2:0b:74:10:87:24:fd:ca:08:84:92:57:de:3c: 30:d4:80:ef:29:e4:d0:73:77:53:7c:00:4c:28:59:6a:5f:20: dc:ce:3c:5c:d6:46:16:de:b1:d6:37:7c:41:15:64:6a:ef:f2: 0f:d4:59:34:08:bc:39:c4:08:24:40:fa:af:ec:45:4a:bd:6c: 74:d2:2a:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BAE/GBCHAgPxaBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk OTJkNTQ4NzAtMDJiNC00M2YxLWEwNmEtMGM3ZGZkZDQwMTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+eNRZSsVEMFmqefnPiorn6iy/+ZCQ8F9GNp nl+wZfckRKJiQg1lOPIq3AQYwjoTST8SkXS0cHxqdRLasAti3JlS8kjYeqrapA0A KnGRC9D5J7GJwjQKeUv8KBrxROjBm8EbpnQX2M/e2gost3q7fCz7WMisHzU/aplx /Wa05rbQdhGfWR2JBkkCtw3iUYPbdh6dI6KKEs0g0ha5ZcRxgjmrjrWel4k1sp1u 06BhCGMxfBb4QmtbafxoP4vZJzxCJ/JCG3U2nfoB5yKtd7w0+2laGndDrPF1PZap arMmD0mJoEu1K8XJJ5+R17iWbS8igAGzlEhM9rk7VOF4VWafeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLt31T9d35WwOKQ2eue1pUaKoHFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOTA2ZTIyOTEtNjEzZC0z MzllLTgwMzgtM2U3MDQyMmNhMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWDdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaQTWOvyf1TsYSH17d77WVg2iC331WpKaPm3q2VXgpaPmpkDLRmnMS2 Rois6IZagBSxql2mzHYIBw2DPEe/a3Fjb5AsS2qLu2dF1uGiDKYMXdi8rvhatLhB x7ePp7tuYJev6U8udTPL11v8n64S0TlM3i7VoKNDREOBAhvEb+nIYdk/0+fg0EuB CwQKTQ+cErtPDTVZUTbQY9alWLCKw8ImagiaRgrmzxuCmK9TamZhWhqpPhWYITni C3QQhyT9ygiEklfePDDUgO8p5NBzd1N8AEwoWWpfINzOPFzWRhbesdY3fEEVZGrv 8g/UWTQIvDnECCRA+q/sRUq9bHTSKtg= -----END CERTIFICATE-----Generated at Fri Apr 17 21:31:48 2026 by rpki-client